اخبار امنیتی

Infosecurity Magazine ۱۸ ساعت پیش

Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency

Attackers drained hot wallets on outdated BTCPay Server instances, with $1.63m traced so far

Malwarebytes Labs ۱۸ ساعت پیش

A hidden backdoor put 1.3 million TV boxes to work for criminals

Videostrong planted a backdoor in more than 1.3 million Android set-top boxes and sold criminals access to the resulting botnet.

Help Net Security ۱۸ ساعت پیش

Novee puts forgotten internet-facing assets through penetration testing

Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) tools. “Attackers don’t limit themselves to the applications you’re already testing. They look…

BleepingComputer ۱۸ ساعت پیش

UK school estate hit by 3AM ransomware in suspected AI-assisted attack

A 3AM ransomware affiliate targeted a school estate in the UK and successfully encrypted around 37 of nearly 50 machines reached from an unmanaged host. [...]

Help Net Security ۱۸ ساعت پیش

Assured helps recovery teams find clean backups after ransomware attacks

Assured Data Protection has announced CleanRoom SCAN, a new managed service designed to strengthen cyber recovery by independently scanning isolated backup data using multiple leading security engines to identify hidden threats before restoration. The service helps organizations identify malware and other indicators of compromise earlier, reducing the risk of reinfecting production environments…

Infosecurity Magazine ۱۸ ساعت پیش

Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe

The incident has reportedly resulted in temperatures being changed on supermarket refrigerators, reminiscent of an attack that affected French retailers last month

BleepingComputer ۱۹ ساعت پیش

Police seizes over 100 servers in investment scam crackdown

European law enforcement authorities arrested seven suspects and seized more than 100 servers in a joint action targeting an unnamed company suspected of providing fraudulent trading websites to criminal gangs. [...]

The Register ۱۹ ساعت پیش

Britain on notice: AI-powered ransomware attacks to arrive by 2028

Cyber agency warns critical infrastructure is a likely target as chief urges bosses to stop doing 'tech on the cheap'

BleepingComputer ۲۰ ساعت پیش

Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs

Google has expanded its Cloud Vulnerability Reward Program (VRP) with a new top-tier reward for high-impact architectural security flaws. [...]

Malwarebytes Labs ۲۰ ساعت پیش

Hackers put porn on public billboards and claim it was “far too easy”

A hacking group called Leakers$ gained access to remote management software for billboards and used it to show porn.

Schneier on Security ۲۰ ساعت پیش

AIs Hacking the Law

In both a 2021 essay and my 2022 book, A Hacker’s Mind , I talk about AIs finding vulnerabilities and exploits—hacking—the legal system. Here’s some demonstrations of this from Germany: Legal systems encode the foundations of social order in natural language. Similar to computer systems, the written law can contain vulnerabilities that invite exploitation.1 Courts absorb most exploits through…

Infosecurity Magazine ۲۰ ساعت پیش

NCSC Chief Warns of Imminent AI Ransomware Threat to UK Critical Infrastructure

The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028

Malwarebytes Labs ۲۱ ساعت پیش

Revolve card breach: 1.5 million people may be affected

Revolve says shoppers’ saved card details were stolen. A Texas filing suggests as many as 1.5 million people may be affected.

BleepingComputer ۲۱ ساعت پیش

Harvard University data breach exposed info of 851,000 accounts

Hackers who breached Harvard University's Alumni Affairs and Development systems in November 2025 stole data linked to more than 850,000 unique email addresses, according to breach notification service Have I Been Pwned. [...]

Infosecurity Magazine ۲۱ ساعت پیش

LLMJacking is Costing Some Businesses Up to $1m, Warns Google

Google Mandiant has warned of the high cost of hijacked access to large language models, or LLMJacking

Security Affairs ۲۲ ساعت پیش

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that had enrolled more than 1.3 million set-top boxes in a botnet. The result of the investigation into the malware operation is the striking part: […]

WeLiveSecurity ۲۲ ساعت پیش

Gorbag: Orcs at the border harvesting intelligence from Ukraine

ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line

Infosecurity Magazine ۲۳ ساعت پیش

Police and Tech Firms Team Up to Dismantle XCPE Botnet

Google and partners have taken down the XCPE botnet attributed to Chinese device maker Videostrong

Security Affairs ۱ روز پیش

NIS2 Makes Board Members Personally Liable for Access Control Decisions

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives directors a more direct role in cybersecurity. Under Article 20, the management bodies of essential and important entities must approve the cybersecurity risk-management measures required by […]

Security Affairs ۱ روز پیش

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted by government-backed spyware. The warning follows Apple’s notifications, which began reaching iPhones on October 29, according to the federal cybersecurity office, the BSI. The BSI says members […]